From 7dfc7617085c403d30debe9f08d4c9bcca322744 Mon Sep 17 00:00:00 2001
From: Jan Zeleny <jzeleny@redhat.com>
Date: Wed, 19 Oct 2011 03:27:47 -0400
Subject: Add support to request canonicalization on krb AS requests

https://fedorahosted.org/sssd/ticket/957
---
 src/man/sssd-ipa.5.xml | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

(limited to 'src/man/sssd-ipa.5.xml')

diff --git a/src/man/sssd-ipa.5.xml b/src/man/sssd-ipa.5.xml
index fb592792..2c1a0ed8 100644
--- a/src/man/sssd-ipa.5.xml
+++ b/src/man/sssd-ipa.5.xml
@@ -175,6 +175,23 @@
                         </para>
                     </listitem>
                 </varlistentry>
+
+                <varlistentry>
+                    <term>krb5_canonicalize (boolean)</term>
+                    <listitem>
+                        <para>
+                            Specifies if the host and user pricipal should be
+                            canonicalized when connecting to IPA LDAP and also for AS
+                            requests. This feature is available with MIT
+                            Kerberos >= 1.7
+                        </para>
+
+                        <para>
+                            Default: true
+                        </para>
+                    </listitem>
+                </varlistentry>
+
                 <varlistentry>
                     <term>ipa_hbac_refresh (integer)</term>
                     <listitem>
-- 
cgit